Handling _ldap._tcp.dc._msdcs

[stanps]

Just wondering what everyone is doing so the request for _ldap._tcp.dc._msdcs and wpad, don't get forwarded to the internet.  I'm not running a Windows domain, and I noticed these requests were being forwarded through Unbound DNS.

I've added them as overrides, pointing them to the firewall.  Should I bother?  Is this a bad idea?

Thanks in advance.

[dseven]

side-note: using ".local" for anything other than mDNS is generally not recommended

Since presumably "ourhome.local" is internal-only, you could change [Services > Unbound DNS > General > Local Zone Type] to "static"

[stanps]

side-note: using ".local" for anything other than mDNS is generally not recommended

Since presumably "ourhome.local" is internal-only, you could change [Services > Unbound DNS > General > Local Zone Type] to "static"

It IS internal only.

Thanks!  I'll check out the options there (Local Zone Type).
-S